Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/2D50133762FC96E007F5F74146A307EBCAF69CDC.mft
File:                     2D50133762FC96E007F5F74146A307EBCAF69CDC.mft (raw, json)
Hash identifier:          KYVKQnt+TAMlpEIuDQq7kGkXJ1vgU1WCcqBNCfl3aow=
Subject key identifier:   80:C6:9E:61:0F:AB:F4:A9:1D:2A:CA:CB:04:CF:CF:83:13:71:8B:2C
Authority key identifier: 2D:50:13:37:62:FC:96:E0:07:F5:F7:41:46:A3:07:EB:CA:F6:9C:DC
Certificate issuer:       /CN=A918C2870000/serialNumber=2D50133762FC96E007F5F74146A307EBCAF69CDC
Certificate serial:       613251ADCDE2E75FF91662681A9EB0FFC5267F7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVATN2L8luAH9fdBRqMH68r2nNw.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/2D50133762FC96E007F5F74146A307EBCAF69CDC.mft
Manifest number:          03
Signing time:             Mon 11 Sep 2023 01:01:33 +0000
Manifest this update:     Mon 11 Sep 2023 00:56:33 +0000
Manifest next update:     Tue 12 Sep 2023 04:11:33 +0000
Files and hashes:         1: 2D50133762FC96E007F5F74146A307EBCAF69CDC.crl (hash: Ifp81O9mA765i8t5se6ZKLuirqZjnkNWg0ZRSiZilFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:32:51:ad:cd:e2:e7:5f:f9:16:62:68:1a:9e:b0:ff:c5:26:7f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000/serialNumber=2D50133762FC96E007F5F74146A307EBCAF69CDC
        Validity
            Not Before: Sep 11 00:56:33 2023 GMT
            Not After : Sep 12 04:11:33 2023 GMT
        Subject: CN=80C69E610FABF4A91D2ACACB04CFCF8313718B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f5:1a:70:b8:ce:b3:e6:a6:59:e2:35:38:c9:
                    8e:6b:8c:ee:88:dc:a7:79:a3:67:27:53:04:db:31:
                    32:2f:80:fc:91:5c:35:7c:af:bb:0f:19:65:1d:04:
                    80:af:56:09:43:14:7f:4b:45:8e:ca:f5:02:5a:e4:
                    d2:35:66:6c:a7:d1:8e:28:75:04:06:1f:2a:6d:7c:
                    cb:1b:a2:c5:d4:d9:04:d9:1e:20:24:4a:ee:c5:2c:
                    b2:fc:3e:c5:66:e8:57:ba:34:c2:e1:8c:4f:4f:b6:
                    4c:eb:d1:56:ad:37:f2:f0:7c:1d:de:10:e7:46:71:
                    a2:3c:68:a5:87:c0:58:fb:16:1b:7f:c7:20:82:ab:
                    8f:2c:59:2d:ed:a0:95:7f:fd:a2:7c:47:55:b2:5e:
                    ec:17:1d:8f:02:e0:e3:fd:e3:b0:f6:59:46:a0:0a:
                    28:71:b6:1f:92:43:92:00:5f:ed:7d:9d:34:cf:6f:
                    58:9b:a5:31:e5:e3:50:c7:53:26:09:b9:de:02:76:
                    6a:8c:6f:36:99:55:c6:d3:ed:8e:f2:53:06:b1:93:
                    c3:67:c1:ac:69:4e:9c:c7:05:d9:07:25:f1:11:f2:
                    a0:d8:11:86:17:4a:17:43:da:2f:92:85:1f:1c:b6:
                    86:fa:b6:9b:71:77:65:fa:59:a6:71:b4:11:71:21:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C6:9E:61:0F:AB:F4:A9:1D:2A:CA:CB:04:CF:CF:83:13:71:8B:2C
            X509v3 Authority Key Identifier:
                keyid:2D:50:13:37:62:FC:96:E0:07:F5:F7:41:46:A3:07:EB:CA:F6:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/2D50133762FC96E007F5F74146A307EBCAF69CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVATN2L8luAH9fdBRqMH68r2nNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/2D50133762FC96E007F5F74146A307EBCAF69CDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:57:a3:51:9a:aa:4c:58:88:f7:9e:fc:ba:d1:af:bd:e4:
         04:63:e7:e1:84:99:16:19:7e:4a:f0:84:4d:99:bf:f4:62:89:
         3b:1d:b1:39:3e:0c:43:c7:42:67:b9:33:4d:ae:0e:e3:bf:c4:
         f2:89:ef:5a:74:17:c4:b7:61:0e:e5:8d:cb:cb:57:b7:24:be:
         2f:46:e6:9e:77:65:3c:0b:af:fa:a1:7e:2b:45:31:48:1a:da:
         b4:58:7c:07:4a:d0:0f:f1:57:48:34:37:ca:ad:3f:37:f0:f6:
         01:59:53:aa:ca:89:48:84:d4:ef:41:8e:b9:17:f3:74:ae:40:
         72:72:90:7d:ea:bd:e6:fc:7b:ca:92:fb:16:31:fe:7b:a4:5a:
         d5:ea:db:7e:0b:88:b6:b3:6b:60:c2:9f:13:b4:03:c6:ad:05:
         0a:dc:14:30:25:02:5f:29:9d:cf:a0:4c:ca:68:98:83:57:1c:
         03:be:58:27:08:95:e7:2a:ed:82:83:d9:de:f3:93:bb:f0:f5:
         47:dc:72:59:99:70:40:ad:67:74:80:fd:e2:92:93:05:a6:97:
         75:ce:b5:1f:ca:76:f1:ee:ae:69:47:87:28:21:89:bd:96:4e:
         f3:15:dd:a3:a7:51:5a:bd:0b:4f:09:6e:d9:81:85:af:f6:ba:
         a4:4b:73:fb
-----BEGIN CERTIFICATE-----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